I have a scenario where service now CMDB table or its extension currently does not hold data in all fields for a CI. They are getting updated day by day. Query is how Add-on handles the data to populate the lookup file without any data replication (Without the same CI being repeated when a field in the record changes)
Just to answer. The add-on will replicate the whole ci if the sys_updated_on time is changed.
But if you're looking for a functional and efficient ServiceNow CMDB to Splunk integration take a look at: https://www.thedutchdatadifference.nl/splunk-servicenow/
I created that solution and continuously adding new features. Interested to learn about your use case.